Red Hat Security AdvisoryRHSA-2009:0331
kernel security and bug fix update
Released 2009-03-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-78.0.17.EL, kernel-2.6.9-78.0.17.EL.ia64, kernel-2.6.9-78.0.17.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-78.0.17.EL, kernel-devel-2.6.9-78.0.17.EL, kernel-doc-2.6.9-78.0.17.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-78.0.17.EL, kernel-2.6.9-78.0.17.EL.ia64, kernel-devel-2.6.9-78.0.17.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-78.0.17.EL, kernel-2.6.9-78.0.17.EL.ia64, kernel-devel-2.6.9-78.0.17.EL +12
Fixes 4 records
Priority MEDIUM 60
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FO…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.1673 · Published 2009-01-07 · Fixed CWE-119
Priority LOW 23
drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1)…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00499 · Published 2009-01-28 · Fixed CWE-189
Priority LOW 23
Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors rela…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00408 · Published 2009-01-21 · Fixed CWE-399
Priority LOW 11
libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0037 · Published 2008-12-22 · Fixed CWE-399
THREATIST.IORead the docs